Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2700f5e1-84ec-3b78-b010-29931a8bf1c8.roa
File: 2700f5e1-84ec-3b78-b010-29931a8bf1c8.roa (raw, json)
Hash identifier: MJrwSTDSW8oe5MLuLbXu2m2cPPCqp3JYxC5LLqg0tIY=
Subject key identifier: D0:55:A8:78:2D:C6:1A:67:F3:65:3F:D8:8D:1F:D2:3C:B3:83:E3:AA
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584469F936F5F38D63157655A680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2700f5e1-84ec-3b78-b010-29931a8bf1c8.roa
Signing time: Tue 02 Jan 2024 00:01:09 +0000
ROA not before: Tue 02 Jan 2024 00:01:09 +0000
ROA not after: Sun 31 Mar 2024 23:01:09 +0000
asID: 26042
IP address blocks: 50.114.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:69:f9:36:f5:f3:8d:63:15:76:55:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jan 2 00:01:09 2024 GMT
Not After : Mar 31 23:01:09 2024 GMT
Subject: CN=d7bfa61f-f7b7-4df9-8193-134424db42d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:5e:21:69:67:2c:85:1e:4d:0f:90:d7:8d:
db:55:e5:1e:90:7d:b1:6b:30:a2:62:bc:0b:3e:ec:
a0:88:e8:08:c4:4b:da:d7:55:c5:43:78:02:73:d1:
d0:cf:6b:00:76:c5:d3:6d:98:c0:1b:7f:9d:f7:53:
fd:80:89:72:7c:e3:67:79:86:f8:6a:58:df:e8:bd:
96:91:88:81:c8:73:10:eb:a4:d3:4a:39:34:7c:b8:
e7:6e:0d:3b:c8:d7:57:22:1b:ef:9f:d7:a1:21:d1:
4c:d5:07:fc:87:03:db:31:ea:54:0d:3f:ec:3c:29:
00:ee:08:5a:d6:c5:c1:c3:43:39:57:99:f6:af:b6:
70:30:f4:b4:1f:c3:8b:4f:60:c3:19:c2:a6:f0:ff:
9b:17:80:32:68:d5:50:2d:41:04:a3:c6:f4:48:b4:
a9:c4:ef:38:23:47:42:30:d7:e0:d1:23:22:84:91:
37:9a:54:e6:5e:8f:07:a7:5e:c3:64:b5:94:af:0e:
82:b5:87:48:05:7e:06:69:a8:97:78:6e:d9:f0:d1:
7a:9d:9f:1d:a3:cd:42:6c:2b:2d:8b:de:ad:b7:bb:
e9:86:97:e8:42:2c:d0:ef:0e:a8:f1:c6:43:70:4b:
b5:c9:82:19:c1:d0:58:9a:e3:84:f2:38:83:86:ab:
4e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:55:A8:78:2D:C6:1A:67:F3:65:3F:D8:8D:1F:D2:3C:B3:83:E3:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2700f5e1-84ec-3b78-b010-29931a8bf1c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
50.114.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:1e:16:81:6f:af:d2:39:71:e5:05:58:34:7a:25:22:d0:0b:
a9:d0:ae:b5:1c:1a:f5:b4:f8:ba:61:ff:5f:d4:af:9c:d3:8d:
f8:af:75:b0:54:0a:63:9c:09:d6:47:80:ca:7c:92:4f:ab:52:
f4:79:03:2e:e3:09:60:48:6d:07:a0:34:19:8d:83:ca:df:01:
2d:4b:cf:33:dc:e4:cd:a9:88:3c:66:e0:67:e5:d8:e3:75:b3:
18:32:3f:ba:2f:65:95:4d:fd:1b:27:c8:c7:08:05:1b:9d:07:
65:29:07:9f:e7:fe:6c:70:da:30:0c:34:b5:d4:eb:9a:b2:02:
1a:fa:85:c2:c3:68:4f:d6:ef:17:8a:ff:e1:51:69:79:a8:d0:
19:2c:da:d4:10:01:5a:d9:13:51:65:4e:52:b3:ca:e0:1a:17:
77:2b:23:ae:e5:c1:75:ca:c6:2f:a2:1e:d7:81:e8:61:2f:12:
6f:40:fc:12:2f:52:e9:24:d0:e8:1b:60:79:b2:17:4a:8b:a7:
9b:39:0f:e1:74:55:1c:23:14:15:58:e9:c3:e8:5f:97:02:24:
dc:67:61:da:a6:d7:aa:91:04:17:9f:b2:31:d6:f7:c5:99:38:
70:cc:c5:6d:90:a8:d8:c2:bf:0e:29:17:9f:93:28:95:0a:c1:
4a:11:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:00:15 2025 by rpki-client